This Privacy Policy applies to Learnr, a school management platform operated by CronKode (Pty) Ltd ("CronKode", "we", "us", or "our"), registered in the Republic of South Africa.
We are committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).
Information Officer: Refiloe Seutloali
Contact: hello@learnr.co.za
Address: Free State, South Africa
This policy applies to all personal information collected through the Learnr platform from school administrators, principals, finance officers, teachers, parents/guardians, and learners.
Full name, email address, contact number, role, and school affiliation. Passwords are hashed and never stored in plain text.
Full name, student number, grade, class, attendance records, academic marks, homework completion, behaviour records, XP points and badges.
Learner information is collected and processed on behalf of the school. The school is responsible for obtaining parental consent before providing learner data to us.
Fee account balances, transaction records, and proof of payment documents. Financial records are immutable by design and cannot be deleted.
Device information, IP address, push notification tokens, and usage logs.
| Purpose | Legal Basis |
|---|---|
| Provide and operate the Learnr platform | Contract |
| User authentication and account security | Contract / Legal obligation |
| Student academic and attendance management | Contract (with school) |
| Fee management and financial record keeping | Legal obligation (SA Schools Act) |
| Sending notifications relevant to the user's role | Contract / Consent |
| Platform improvement and debugging | Legitimate interest |
We do not use personal information for advertising or marketing to third parties.
We do not sell personal information. We share information only with:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage | Ireland, EU (GDPR adequate protection) |
| Vercel | Web hosting and deployment | International CDN |
| Google Firebase (FCM) | Push notification delivery | International |
| Information Type | Retention Period |
|---|---|
| Account information | Duration of account + 1 year |
| Learner academic records | 7 years after learner leaves (DBE requirement) |
| Financial transaction records | 7 years (legal requirement) |
| Behaviour records | 7 years after learner leaves |
| Technical logs | 90 days |
You have the right to access, correct, or request deletion of your personal information (subject to legal retention requirements). You may also object to processing or lodge a complaint with the Information Regulator.
To exercise your rights: hello@learnr.co.za
Information Regulator: inforegulator.org.za · inforeg@justice.gov.za
Data is stored with Supabase in Ireland (EU). The EU provides adequate data protection recognised under POPIA Section 72. Push notifications are delivered via Google FCM internationally. All other processing occurs under South African legal oversight.
We use authentication cookies essential for login sessions and local storage for user preferences. We do not use advertising or analytics cookies.
We may update this policy from time to time. Registered users will be notified of material changes via the platform. The effective date above reflects the most recent revision.